Benjamin Pol

I've built public cybersecurity labs spanning SIEM/XDR detection engineering, cloud honeypot threat analysis, and DNS-based network defense.

In my Blue Team and Detection Engineering Lab, I deployed a containerized Wazuh SIEM/XDR architecture, configured Sysmon telemetry mapped to MITRE ATT&CK, and created detection rules for attack patterns including process injection and lateral movement. I documented the architecture, detection logic, setup instructions, and screenshots on GitHub for reproducibility.

I also built an intentionally exposed Azure honeypot to capture and analyze automated attack traffic. Using Microsoft Sentinel and KQL, I developed live geomapped dashboards for attacker origin, frequency, and targeted ports and services, then summarized recurring attack signatures in a written report.

I'm CompTIA Security+, Microsoft SC-200, and SC-900 certified, with working knowledge of NIST CSF and ISO 27001 fundamentals. Alongside my Systems Engineering degree, I've strengthened my communication, coordination, and real-time problem-solving through operational leadership experience.